aws lakeformation
Defines the public endpoint for the Lake Formation service. AWS CLI reference
69 commands Its page in the AWS CLI reference
Commands
add-lf-tags-to-resourceAttaches one or more LF-tags to an existing resource.assume-decorated-role-with-samlAllows a caller to assume an IAM role decorated as the SAML user specified in the SAML assertion included in the request.attach-rls-policyAttaches a row-level security policy to a resource for a principal.batch-grant-permissionsBatch operation to grant permissions to the principal.batch-revoke-permissionsBatch operation to revoke permissions from the principal.cancel-transactionAttempts to cancel the specified transaction.commit-transactionAttempts to commit the specified transaction.create-data-cells-filterCreates a data cell filter to allow one to grant access to certain columns on certain rows.create-lake-formation-identity-center-configurationCreates an IAM Identity Center connection with Lake Formation to allow IAM Identity Center users and groups to access Data Catalog resources.create-lake-formation-opt-inEnforce Lake Formation permissions for the given databases, tables, and principals.create-lf-tagCreates an LF-tag with the specified name and values.create-lf-tag-expressionCreates a new LF-Tag expression with the provided name, description, catalog ID, and expression body.create-rls-policyCreates a row-level security (RLS) policy.delete-data-cells-filterDeletes a data cell filter.delete-lake-formation-identity-center-configurationDeletes an IAM Identity Center connection with Lake Formation.delete-lake-formation-opt-inRemove the Lake Formation permissions enforcement of the given databases, tables, and principals.delete-lf-tagDeletes an LF-tag by its key name.delete-lf-tag-expressionDeletes the LF-Tag expression.delete-objects-on-cancelFor a specific governed table, provides a list of Amazon S3 objects that will be written during the current transaction and that can be automatically deleted if the transaction is canceled.delete-rls-policyDeletes a row-level security policy.deregister-resourceDeregisters the resource as managed by the Data Catalog.describe-lake-formation-identity-center-configurationRetrieves the instance ARN and application ARN for the connection.describe-resourceRetrieves the current data access role for the given resource registered in Lake Formation.describe-transactionReturns the details of a single transaction.detach-rls-policyDetaches a row-level security policy from a resource for a principal.extend-transactionIndicates to the service that the specified transaction is still active and should not be treated as idle and aborted.get-data-cells-filterReturns a data cells filter.get-data-lake-principalReturns the identity of the invoking principal.get-data-lake-settingsRetrieves the list of the data lake administrators of a Lake Formation-managed data lake.get-effective-permissions-for-pathReturns the Lake Formation permissions for a specified table or database resource located at a path in Amazon S3.get-lf-tagReturns an LF-tag definition.get-lf-tag-expressionReturns the details about the LF-Tag expression.get-query-stateReturns the state of a query previously submitted.get-query-statisticsRetrieves statistics on the planning and execution of a query.get-resource-lf-tagsReturns the LF-tags applied to a resource.get-rls-policyReturns the definition of a row-level security policy, including its attachment columns and filter expression.get-table-objectsReturns the set of Amazon S3 objects that make up the specified governed table.get-temporary-data-location-credentialsAllows a user or application in a secure environment to access data in a specific Amazon S3 location registered with Lake Formation by providing temporary scoped credentials that are limited to the requested data location and the caller's authorized access level.get-temporary-glue-partition-credentialsThis API is identical to GetTemporaryTableCredentials except that this is used when the target Data Catalog resource is of type Partition.get-temporary-glue-table-credentialsAllows a caller in a secure environment to assume a role with permission to access Amazon S3.get-work-unit-resultsReturns the work units resulting from the query.get-work-unitsRetrieves the work units generated by the StartQueryPlanning operation.grant-permissionsGrants permissions to the principal to access metadata in the Data Catalog and data organized in underlying data storage such as Amazon S3.list-data-cells-filterLists all the data cell filters on a table.list-lake-formation-opt-insRetrieve the current list of resources and principals that are opt in to enforce Lake Formation permissions.list-lf-tag-expressionsReturns the LF-Tag expressions in caller’s account filtered based on caller's permissions.list-lf-tagsLists LF-tags that the requester has permission to view.list-permissionsReturns a list of the principal permissions on the resource, filtered by the permissions of the caller.list-resourcesLists the resources registered to be managed by the Data Catalog.list-rls-policiesLists the row-level security policies in the Data Catalog.list-rls-policy-attachmentsLists the row-level security policy attachments in the Data Catalog.list-table-storage-optimizersReturns the configuration of all storage optimizers associated with a specified table.list-transactionsReturns metadata about transactions and their status.put-data-lake-settingsSets the list of data lake administrators who have admin privileges on all resources managed by Lake Formation.register-resourceRegisters the resource as managed by the Data Catalog.remove-lf-tags-from-resourceRemoves an LF-tag from the resource.revoke-permissionsRevokes permissions to the principal to access metadata in the Data Catalog and data organized in underlying data storage such as Amazon S3.search-databases-by-lf-tagsThis operation allows a search on DATABASE resources by TagCondition.search-tables-by-lf-tagsThis operation allows a search on TABLE resources by LFTags.start-query-planningSubmits a request to process a query statement.start-transactionStarts a new transaction and returns its transaction ID.update-data-cells-filterUpdates a data cell filter.update-lake-formation-identity-center-configurationUpdates the IAM Identity Center connection parameters.update-lf-tagUpdates the list of possible values for the specified LF-tag key.update-lf-tag-expressionUpdates the name of the LF-Tag expression to the new description and expression body provided.update-resourceUpdates the data access role used for vending access to the given (registered) resource in Lake Formation.update-rls-policyUpdates the filter expression of an existing row-level security policy.update-table-objectsUpdates the manifest of Amazon S3 objects that make up the specified governed table.update-table-storage-optimizerUpdates the configuration of the storage optimizers for a table.